CVE-2025-14469

creationtimestamp| type| source ---|---|--- 2026-08-01 17:07:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzxfsnjdi2x 2026-08-01 17:08:01+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzxgj4qb22b...

CVE-2026-18245

creationtimestamp| type| source ---|---|--- 2026-07-30 19:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv4y6hato2z 2026-07-30 19:04:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bovzhqup4waot 2026-07-30 20:01:52+00:00| seen|...

relay-secreport-bench

secreport-bench — the Security-Report Benchmark An evaluation...

PYSEC-2025-194

creationtimestamp| type| source ---|---|--- 2026-07-24 09:40:25+00:00| seen| https://gist.github.com/sw1pp3r/00f32e3393b6c6123cc7aeaff3ed9f18...

PT-2026-63390

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.7.0 through 1.25.1 Description When the dnscrypt: clause contains more dnscrypt-provider-cert: files than matching dnscrypt-secret-key: files, the software fails to properly initialize all slots, leaving some fill...

CVE-2026-63963

creationtimestamp| type| source ---|---|--- 2026-07-21 09:28:48+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr5in7swgl2p 2026-07-21 09:28:51+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr5incph7d25 2026-07-21 09:28:54+00:00| seen|...

CVE-2025-63579

creationtimestamp| type| source ---|---|--- 2026-07-11 00:36:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdg7jkghf2s...

CVE-2025-71375

creationtimestamp| type| source ---|---|--- 2026-07-04 05:13:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpsch7kew52r 2026-07-04 06:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpsf3vkjhx2v...

CVE-2026-11397

creationtimestamp| type| source ---|---|--- 2026-07-03 06:11:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppv7esftr2w 2026-07-03 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpqwyyq3yp2k 2026-07-03 20:53:28+00:00| seen|...

CVE-2026-14056

creationtimestamp| type| source ---|---|--- 2026-07-01 21:21:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmh5xawjd2l 2026-07-02 01:38:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvi7um2k2y 2026-07-02 07:50:52+00:00| seen|...

CVE-2026-9711

creationtimestamp| type| source ---|---|--- 2026-06-30 10:10:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpir76ee3o2k 2026-06-30 10:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpiscahf2m2x 2026-06-30 10:30:32+00:00| seen|...

CVE-2026-8024

creationtimestamp| type| source ---|---|--- 2026-06-18 10:01:16+00:00| seen| https://infosec.exchange/users/certvde/statuses/116770529327887486 2026-06-18 10:01:32+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mokl2y64ikr2 2026-06-18 12:19:34+00:00| seen|...

UBUNTU-CVE-2026-2049

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

Cloud Security Report Finds Fragmented Tools Widening the Cloud Complexity Gap

Washington D.C., USA, 10th June 2026, CyberNewswire...

CVE-2026-46440

creationtimestamp| type| source ---|---|--- 2026-06-08 16:49:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns57nbjh323 2026-06-08 17:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mns5tfhmv52k 2026-06-22 00:25:01+00:00| seen|...

CVE-2024-58349

creationtimestamp| type| source ---|---|--- 2026-06-08 04:50:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqv2o5l6e2o 2026-06-08 05:14:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqwfrkn7r2y...

CVE-2026-9408

creationtimestamp| type| source ---|---|--- 2026-05-25 01:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116632625460794481 2026-05-25 01:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmnddk3og42y 2026-06-22 03:17:16+00:00| seen|...

cve-researcher

cve-researcher AI-powered CVE research in your terminal —...

CVE-2026-7879

In Concrete CMS 9.5.0 and below, the submitpassword method in concrete/controllers/singlepage/downloadfile.php allows unauthorized file access since downloading permission-restricted files bypasses the viewfile permission check. Files without passwords can be downloaded and any user who knows a...

Concrete CMS is Vulnerable to Cross-Site Request Forgery

Concrete CMS 9.5.0 and below emits a CSRF token in the localavailableupdate.php view $token-output'doupdate' but the corresponding doupdate method in concrete/controllers/singlepage/dashboard/system/update/update.php never calls $this-token-validate'doupdate'. The form is rendered as a POST form,...